A 2021 Colorado law modified many of the statewide data practices by specifying requirements regarding the creation of a data-sharing and privacy master plan and sharing personal identifying information between state agencies. Moreover, it codified the “share first” expectation (24-37.5-704 C.R.S) for data sharing statewide, specifically that, except where prohibited by state or federal law, agencies are preemptively authorized to share data with other state agencies, legislative and judicial branches, political subdivisions, and non-governmental organizations. Additionally, to enhance data privacy measures, in May 2020, the Governor published guidance on data privacy with respect to state agencies sharing personal identifying information with the federal government or other third parties, some of which were codified into law in the 2021 legislative session.
Additionally, the Government Data Advisory Board (GDAB) was tasked with developing a data inventory and creating standardized data sharing agreements through HB21-1236. GDAB created the data inventory and data sharing subcommittees in early 2022 to complete this work. Both the development of data inventory and data sharing agreements are underway and should be completed by November 2022.